Safeey.io

Privacy Policy

Safeey ("Safeey", "we", "us", or "our") is a web security scanning service operated by Noohra Innovate Ltd. This Privacy Policy explains what information we collect when you use Safeey at safeey.io (the "Service"), how we use it, and the choices you have.

By using the Service, you agree to the practices described here.

Information we collect

Account information. When you create an account we collect your email address, your name (if you provide one), and a securely hashed version of your password. We never store your password in plain text.

Domain verification data. To scan a domain, you must prove you control it. We store the domain name, a verification token we generate, and whether verification succeeded.

Scan data. When you run a scan we store the target URL and domain, the time of the scan, and the results (such as the security grade, issue counts, and findings). This lets you and, where applicable, our administrators review scan history.

Payment information. Subscriptions are processed by Paystack. We do not collect or store your card or bank details — those are handled directly by Paystack. We store limited billing identifiers returned by Paystack (such as a customer code and subscription status) so we can manage your subscription.

Technical data. Like most web services, our infrastructure may process standard technical information such as IP address, browser type, and request logs for security and reliability purposes.

How we use your information

We use your information to: provide and operate the Service; authenticate you and maintain your session; verify domain ownership before scanning; run scans and store their results; process and manage your subscription; communicate with you about your account or the Service; detect, prevent, and address security issues and abuse; and comply with legal obligations.

How scanning works

Safeey only scans a domain after you have verified control of it by placing a verification file at its root (except for administrator accounts). Scans send HTTP requests to the target you specify. We do not use your scan results to attack, exploit, or compromise any system.

Service providers

We share information with a small number of processors strictly to operate the Service:

  • Neon — managed PostgreSQL database hosting, where account, subscription, verification, and scan records are stored.
  • Paystack — payment processing for subscriptions.
  • Vercel — application hosting and delivery.

These providers process data on our behalf under their own security and privacy commitments. We do not sell your personal information.

Cookies

We use a session cookie to keep you signed in. It is essential to the operation of the Service. We do not use advertising cookies.

Data retention

We retain your account and related data for as long as your account is active. Scan history is retained so you can review it. If you close your account or ask us to delete your data, we will delete or anonymize it, except where we must retain certain records to meet legal, accounting, or security obligations.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. You can also update your password from within your account.

Security

We protect your data with measures including password hashing, encrypted connections (HTTPS), signature-verified payment webhooks, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues.

Children

Safeey is not directed to children and is intended for use by those responsible for the security of a website. We do not knowingly collect data from children.

International users

We are based in Nigeria, and our providers may process data in other countries. By using the Service you understand that your information may be processed outside your country of residence.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes may be communicated through the Service.

Contact

For privacy questions or requests, contact Noohra Innovate Ltd at support@safeey.io.